Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          z8KbMhCOEgn2IZi0eVtaup3UENVwOxXSFiHmf68FrYE=
Subject key identifier:   7D:9C:CF:45:72:FE:32:5F:29:46:07:13:FF:79:A5:35:3C:60:54:1B
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0348
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          0326
Signing time:             Thu 08 May 2025 03:43:57 +0000
Manifest this update:     Thu 08 May 2025 03:43:57 +0000
Manifest next update:     Sat 10 May 2025 03:43:56 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: CVM6TCnK4sEttQTm/E8433WcS8lL1oQLGqDZ5aHntXM=)
                          2: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          3: 4C04590A19C311F086AB4AFF6DB8BCC6.roa (hash: xIo3hGREn8S9T23pTXvTH+br+zFpiR4dijmgM7JOPi8=)
                          4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          7: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          8: 715F7C6A20EA11F0B8E627ACDAE4EC9C.roa (hash: xAuCxSESapePheQaNQUQosVQuvFdA5GWHeFuEjIS95k=)
                          9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 May 2025 03:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: May  8 03:43:57 2025 GMT
            Not After : May 10 03:43:56 2025 GMT
        Subject: CN=681c287d-c0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:5c:68:44:6b:ed:3d:7c:a0:b5:74:5a:de:
                    7d:b5:6e:18:75:73:a4:a8:e0:1a:7d:06:5c:a7:af:
                    c2:25:00:13:cd:6b:1f:eb:20:b9:de:78:ca:ad:df:
                    04:1e:1c:cc:1e:ec:12:33:c6:68:b6:6d:52:be:8e:
                    b3:4c:1d:45:e0:1b:de:46:17:e8:90:6f:98:c2:78:
                    ae:83:88:88:b3:bb:42:dc:59:2c:ac:9e:c7:20:8f:
                    3e:61:03:6d:ce:a5:a2:e3:ac:a3:74:03:90:62:34:
                    3f:64:ab:c6:a8:c7:08:a5:f5:18:e3:6d:6e:36:c2:
                    a0:ef:77:6d:39:c0:88:7b:da:a4:56:be:16:dd:c3:
                    3d:bf:12:3f:58:40:f7:5e:4d:ef:82:e0:6e:26:a3:
                    aa:2a:de:70:86:78:b5:f6:2f:05:c2:2f:3e:3d:34:
                    5d:20:cc:c9:a3:b6:5b:38:b2:f3:0f:26:63:af:c7:
                    75:68:1c:d3:3b:2e:1e:cc:b7:70:4a:bf:23:a7:51:
                    48:3c:fe:9a:4d:b2:c9:f0:34:71:94:e6:48:f3:42:
                    a6:81:1e:8d:3d:17:f4:5b:88:43:e6:66:0e:5a:4d:
                    82:76:ce:77:ec:a9:a1:ef:b4:1a:f4:ed:01:b5:41:
                    88:31:38:04:6e:b3:d5:53:e7:73:3e:d6:5a:a4:f3:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9C:CF:45:72:FE:32:5F:29:46:07:13:FF:79:A5:35:3C:60:54:1B
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:4b:79:02:b4:45:0b:93:02:af:7c:f0:08:af:2c:9f:c6:
         ec:ac:3a:fd:18:aa:63:e9:83:17:97:7c:4e:45:61:2f:17:fb:
         80:c5:fb:de:8b:12:11:df:04:2e:d3:59:df:02:c1:c0:f2:f7:
         24:f4:79:05:ed:40:3a:75:27:94:47:8f:c2:d7:55:e1:08:e1:
         c8:05:3f:cc:8d:95:d6:b0:bd:fe:6b:98:41:d1:b3:99:da:a3:
         2a:84:3b:e1:5b:79:ae:f3:f8:88:1a:0f:dc:c0:50:84:2d:e1:
         86:25:a0:89:83:0a:b3:f9:2c:ae:69:06:54:49:b1:de:9d:02:
         d7:07:28:b0:c0:62:48:4e:f0:cc:bd:08:0d:f8:48:f2:4c:8c:
         c8:1f:87:58:c8:3b:19:65:09:b3:f4:13:7e:1b:0d:98:32:51:
         9e:7d:a1:1f:92:3c:9c:97:ec:cf:84:a3:00:24:8f:a9:ee:2d:
         d4:9f:2c:e1:c3:76:b4:ab:58:21:55:a6:e4:7b:56:8d:f3:95:
         68:e5:b6:bf:73:0d:12:5c:14:97:c0:ec:c7:ea:ff:ff:b3:d7:
         54:9d:f0:e1:9c:00:4b:ee:df:86:d1:7b:a1:52:a8:ca:bf:f0:
         45:fd:36:d9:2c:42:54:29:18:2a:ba:95:dc:e6:fb:95:20:46:
         84:0c:9e:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNTA1MDgwMzQzNTdaFw0yNTA1MTAwMzQzNTZaMBgxFjAU
BgNVBAMTDTY4MWMyODdkLWMwZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFdVxoRGvtPXygtXRa3n21bhh1c6So4Bp9Blynr8IlABPNax/rILneeMqt
3wQeHMwe7BIzxmi2bVK+jrNMHUXgG95GF+iQb5jCeK6DiIizu0LcWSysnscgjz5h
A23OpaLjrKN0A5BiND9kq8aoxwil9RjjbW42wqDvd205wIh72qRWvhbdwz2/Ej9Y
QPdeTe+C4G4mo6oq3nCGeLX2LwXCLz49NF0gzMmjtls4svMPJmOvx3VoHNM7Lh7M
t3BKvyOnUUg8/ppNssnwNHGU5kjzQqaBHo09F/RbiEPmZg5aTYJ2znfsqaHvtBr0
7QG1QYgxOARus9VT53M+1lqk84JRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfZzP
RXL+Ml8pRgcT/3mlNTxgVBswHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE
OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfZEt5ArRFC5MCr3zwCK8sn8bsrDr9
GKpj6YMXl3xORWEvF/uAxfveixIR3wQu01nfAsHA8vck9HkF7UA6dSeUR4/C11Xh
COHIBT/MjZXWsL3+a5hB0bOZ2qMqhDvhW3mu8/iIGg/cwFCELeGGJaCJgwqz+Syu
aQZUSbHenQLXByiwwGJITvDMvQgN+EjyTIzIH4dYyDsZZQmz9BN+Gw2YMlGefaEf
kjycl+zPhKMAJI+p7i3Unyzhw3a0q1ghVabke1aN85Vo5ba/cw0SXBSXwOzH6v//
s9dUnfDhnABL7t+G0XuhUqjKv/BF/TbZLEJUKRgqupXc5vuVIEaEDJ5L
-----END CERTIFICATE-----
Generated at Fri May 9 02:38:38 2025 by rpki-client